Kyma API Rule

[Zafer]

Hi All,

We are using Kyma runtime and also planning to use API Management as well. We are planning to deploy our API on Kyma and publish it via API Management.

Is there any way to create the rule for Kyma APIs which is only accessible from API Management? We don't want to make it public only accessible over API Management.

Regards,

Zafer

[jamie_cawley]

A Kyma API would be available on the internet, I would suggest securing it with oauth or jwt.

https://kyma-project.io/docs/kyma/latest/03-tutorials/00-api-exposure/apix-03-expose-and-secure-work...

Regards,

Jamie

[Zafer]

Hi Jamie

I read those documents too however I am searching for ways of making them only accessible on the BTP platform. API Management is the BTP service and Kyma same as well. If I only open BTP IP's range or only make it accessible internally on BTP, we will protect our services from attacks, coming from the Internet.

Regards,

Zafer